Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/VJThtsPB0XYC5_29l6xarEaC7B0.roa
File: VJThtsPB0XYC5_29l6xarEaC7B0.roa (raw, json)
Hash identifier: yxXwwU/g4s7Fj4ed2oqztCZwrEvsKGzDm2jR7p72IsM=
Subject key identifier: 54:94:E1:B6:C3:C1:D1:76:02:E7:FD:BD:97:AC:5A:AC:46:82:EC:1D
Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial: 018CB4AC46D8741B6ABDC49E41079482941E
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/VJThtsPB0XYC5_29l6xarEaC7B0.roa
Signing time: Fri 29 Dec 2023 08:23:58 +0000
ROA not before: Fri 29 Dec 2023 08:23:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61135
IP address blocks: 212.64.202.0/24 maxlen: 24
212.64.211.0/24 maxlen: 32
212.64.210.0/24 maxlen: 32
212.64.214.0/24 maxlen: 32
212.64.216.0/24 maxlen: 32
212.64.215.0/24 maxlen: 32
212.64.217.0/24 maxlen: 32
212.64.223.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b4:ac:46:d8:74:1b:6a:bd:c4:9e:41:07:94:82:94:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Validity
Not Before: Dec 29 08:23:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5494e1b6c3c1d17602e7fdbd97ac5aac4682ec1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f6:56:66:4a:20:df:0a:7a:0e:e2:00:46:cd:
10:3d:74:af:cd:3d:42:45:c5:90:d3:11:5c:77:b1:
e9:69:30:30:d5:ae:d4:8c:b3:a2:db:6c:30:28:a9:
93:da:74:bf:41:0c:19:dc:66:33:4e:d6:02:8b:fd:
8d:2f:b3:4c:5c:c8:48:52:17:a4:a3:73:db:12:9b:
2a:e4:94:81:7c:0c:fa:18:f4:a4:a6:3b:86:d0:cf:
e5:3a:29:53:08:37:7c:fc:70:3d:d4:f5:29:0e:35:
d3:fb:47:f2:fe:fd:cc:31:61:bb:d2:09:c3:0b:b0:
c3:dd:cb:6f:96:00:c6:8a:31:80:9b:89:dc:ac:fa:
be:56:e1:e9:7e:8a:94:f7:a2:b1:98:7d:ed:ea:cd:
08:7e:10:46:65:6d:4f:ed:73:2a:bb:c9:fa:1d:ce:
6d:fd:5e:36:d8:e5:69:a7:f8:31:00:ce:df:66:7e:
70:5a:54:34:c9:f6:dc:b4:57:9c:73:c3:81:4a:01:
42:1b:a5:bb:32:fa:0e:24:5b:00:c0:9d:78:ee:29:
58:d7:1c:cb:aa:f2:5d:87:e2:09:0e:7a:a1:c7:16:
00:10:6d:5a:aa:f0:19:5e:85:36:c9:8a:e0:d0:1b:
7a:41:ac:e0:21:13:bf:00:a2:0a:20:cf:6b:b4:c1:
ba:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:94:E1:B6:C3:C1:D1:76:02:E7:FD:BD:97:AC:5A:AC:46:82:EC:1D
X509v3 Authority Key Identifier:
keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/VJThtsPB0XYC5_29l6xarEaC7B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.64.202.0/24
212.64.210.0/23
212.64.214.0-212.64.217.255
212.64.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:75:10:3a:b2:7a:4c:f4:5f:6e:b5:2e:78:d7:60:d9:d7:21:
c8:e7:25:9e:77:b0:3d:35:da:3d:2d:5e:85:2a:69:65:d4:61:
64:a7:c2:ee:53:16:40:b5:5d:25:de:d5:9b:98:9d:f2:b0:20:
49:03:52:7b:0c:a9:4a:e5:23:44:1e:c8:97:56:cb:b2:ca:7e:
06:14:e7:78:df:e0:37:03:cd:fd:3e:2d:37:00:a7:60:17:1c:
49:a0:c5:11:1e:6b:c9:cd:b9:e5:1d:46:60:a4:7a:d1:2d:84:
28:18:93:e7:8c:0d:86:d5:c6:f2:73:9e:e5:18:5c:79:a6:19:
68:a5:dd:3d:e2:a0:0e:be:0a:02:cb:85:14:da:37:0a:f3:dd:
6d:df:bc:f2:a1:6f:cc:76:32:1f:f6:fc:74:89:93:fc:27:07:
fd:db:e6:e4:5f:d2:db:44:f1:6b:ff:43:78:8a:52:3c:45:3f:
f9:21:a2:55:42:21:db:5d:d6:5e:6c:0e:d1:5e:0b:8d:fa:d0:
ce:76:d2:b0:39:90:bf:ba:98:8f:51:97:e8:1d:1a:cf:17:83:
ef:4e:c2:6e:4f:a5:c2:33:7b:32:be:52:b0:47:09:a8:cf:49:
27:07:d8:fa:7f:49:5f:a0:7b:85:3e:d8:88:1d:76:7a:4a:5f:
72:6d:0e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:31 2024 by rpki-client on console-fra.rpki-client.org